Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07E6934EE45A11EFBD47DC1CC4F9AE02.roa
File: 07E6934EE45A11EFBD47DC1CC4F9AE02.roa (raw, json)
Hash identifier: Kc0YO8jz519W29qGXshh3QEUCtBieNSZ/lhTzZ7nMAo=
Subject key identifier: 5A:6F:43:2C:80:DA:B0:58:17:DD:BD:79:07:33:C7:E1:D4:8B:27:41
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A4CB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07E6934EE45A11EFBD47DC1CC4F9AE02.roa
Signing time: Thu 06 Feb 2025 07:14:40 +0000
ROA not before: Thu 06 Feb 2025 07:14:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 839
IP address blocks: 103.38.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 11:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42187 (0xa4cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 6 07:14:40 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67a46160-47b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:85:dd:02:35:69:fe:13:6a:c7:66:0a:bc:
82:eb:42:32:ab:ea:22:f0:71:b3:f4:f9:b7:95:b1:
6f:b1:cf:0d:f4:08:f2:5f:0b:78:98:66:b6:bc:e0:
4e:3d:c7:db:7d:bc:45:f2:2c:de:2c:ab:2e:b5:61:
38:2e:eb:9a:9c:e0:d1:c1:5b:12:a7:3d:9d:bd:e1:
5b:c9:75:7d:cb:90:c6:b9:dc:e7:ff:48:81:2a:08:
e3:2e:da:e4:9b:4e:24:45:df:42:19:2b:e0:0c:51:
9d:22:b2:62:7d:9f:35:90:66:98:22:a5:83:16:eb:
cf:c4:c5:27:23:b4:04:6b:8d:be:53:c6:6b:52:5a:
16:c4:8e:86:07:97:84:ab:6e:65:4b:58:2b:52:64:
97:3f:d3:ce:66:1b:49:18:2a:b4:0b:ba:1d:03:59:
11:68:b8:a6:bc:8c:2d:1f:49:aa:57:11:8c:b7:7c:
fd:a1:11:51:2d:f7:07:09:42:5e:85:c4:e9:7b:ab:
b5:42:65:68:e2:d0:55:d4:c3:9a:34:ae:a5:ee:4f:
e2:49:89:9b:00:b4:7e:f6:ae:52:41:9d:28:e2:6a:
19:54:76:95:9e:04:66:7d:b7:bd:91:b5:24:0d:f5:
61:23:8d:f9:fc:3a:80:f1:73:e1:ff:71:c8:e7:25:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6F:43:2C:80:DA:B0:58:17:DD:BD:79:07:33:C7:E1:D4:8B:27:41
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07E6934EE45A11EFBD47DC1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.150.0/24
Signature Algorithm: sha256WithRSAEncryption
75:84:56:c0:1b:88:4b:22:e4:59:c8:71:e2:0d:21:0c:f5:91:
86:af:10:c7:e9:f0:a6:56:3b:96:b6:c5:1b:6a:d5:5c:14:84:
1c:8f:5a:c5:fb:7b:72:e8:07:73:49:1f:1e:d0:14:0b:ff:48:
0b:23:0e:b1:f8:5c:97:82:bf:2b:8c:3a:c2:46:4d:56:c1:f4:
3a:76:c5:7d:da:78:db:34:73:04:00:f2:ce:98:7a:e7:77:65:
59:ff:2b:74:45:3b:02:7c:bb:83:3b:54:1a:b3:59:16:d8:22:
79:68:96:19:ad:51:ff:89:14:04:4a:dd:a2:5c:94:78:53:a1:
9e:7f:c0:30:2b:1e:88:73:6c:df:77:81:42:d4:71:83:24:8f:
18:70:c9:4b:12:c4:98:32:ed:99:77:c3:47:47:7c:ec:6a:ca:
76:8d:38:17:cd:19:87:64:83:0d:ef:66:de:f7:9d:2d:01:56:
3a:5d:e5:dc:e0:23:9e:dd:a6:23:4f:cd:05:98:30:2d:67:6f:
18:b2:a6:2c:6b:b1:45:b3:81:34:57:c1:0d:bb:a6:e0:2d:4f:
bf:09:96:b4:bb:b3:62:14:4f:6d:b4:ca:76:29:15:15:63:2d:
ac:6b:82:01:69:bd:8d:61:14:21:e0:16:6d:6d:64:3e:1e:79:
72:20:6f:fc
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAKTLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDIwNjA3MTQ0MFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjdhNDYxNjAtNDdiMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK8Jhd0CNWn+E2rHZgq8gutCMqvqIvBxs/T5t5Wxb7HPDfQI8l8LeJhmtrzg
Tj3H2328RfIs3iyrLrVhOC7rmpzg0cFbEqc9nb3hW8l1fcuQxrnc5/9IgSoI4y7a
5JtOJEXfQhkr4AxRnSKyYn2fNZBmmCKlgxbrz8TFJyO0BGuNvlPGa1JaFsSOhgeX
hKtuZUtYK1Jklz/TzmYbSRgqtAu6HQNZEWi4pryMLR9JqlcRjLd8/aERUS33BwlC
XoXE6XurtUJlaOLQVdTDmjSupe5P4kmJmwC0fvauUkGdKOJqGVR2lZ4EZn23vZG1
JA31YSON+fw6gPFz4f9xyOcl0jUCAwEAAaOCApUwggKRMB0GA1UdDgQWBBRab0Ms
gNqwWBfdvXkHM8fh1IsnQTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA3RTY5MzRF
RTQ1QTExRUZCRDQ3REMxQ0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZyaWMA0GCSqGSIb3DQEBCwUAA4IBAQB1hFbAG4hLIuRZ
yHHiDSEM9ZGGrxDH6fCmVjuWtsUbatVcFIQcj1rF+3ty6AdzSR8e0BQL/0gLIw6x
+FyXgr8rjDrCRk1WwfQ6dsV92njbNHMEAPLOmHrnd2VZ/yt0RTsCfLuDO1Qas1kW
2CJ5aJYZrVH/iRQESt2iXJR4U6Gef8AwKx6Ic2zfd4FC1HGDJI8YcMlLEsSYMu2Z
d8NHR3zsasp2jTgXzRmHZIMN72be950tAVY6XeXc4COe3aYjT80FmDAtZ28YsqYs
a7FFs4E0V8ENu6bgLU+/CZa0u7NiFE9ttMp2KRUVYy2sa4IBab2NYRQh4BZtbWQ+
HnlyIG/8
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:51 2025 by rpki-client